Subject: Re: PAM
To: <>
From: Ignatios Souvatzis <ignatios@theory.cs.uni-bonn.de>
List: tech-kern
Date: 09/25/2002 10:47:39
--gBBFr7Ir9EOA20Yy
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Hi,

On Wed, Sep 25, 2002 at 10:10:42AM +0200, der Mouse wrote:

> (2) It's also fairly easy to fix; the simplest change that comes to
>     mind is to have the magic syscalls affect the parent of the calling
>     process rather than the calling process itself.  An arguably better
>     way would be to have the calls affect "the process on the other end
>     of this pipe".

Minor comment:

This won't work. There can be zero to N processes at the end of a pipe.

I don't think "affect all processes at the other end of a pipe" is wise...
IMHO this opens us up for interesting future security holes.

Regards,
	Ignatios

--gBBFr7Ir9EOA20Yy
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: 2.6.i

iQEVAgUBPZF4KDCn4om+4LhpAQE7oQgAiYUOlk8pBpSnMiL1ruh5fOxQWvWkw1Hw
F+/AZl0VqCb5d76o14BgbGOkQ7UosF1yyhsV6cT3hF9T1qloO3rX/MGtTPJEsuPo
3PXTC+fRqlHcEpTu3f9SUTBllxiwedJKWrn6vFtpANuyI12tGqHUkBS54j6vQ+MD
CtTzRHL+q0zlMJUmdBlvvZO7g5aq4CleNAm2SOkVt5EYEndEiu9mUaLrLvTRWXNh
gwk0R5I7FgPVmO4qOHUyv1l2GT6650HKDu3HaCDqbUBufVFykvivFuRMCfFlpdVP
h9oBsoMlqWJicFFjeWLKc0+nVMu8HUPhdG2LJ/WdaYXcrd8ZWxWMSA==
=Vrmp
-----END PGP SIGNATURE-----

--gBBFr7Ir9EOA20Yy--